Cloud Security

Deep Analysis of Microsoft Office RTF File Stack Overflow Vulnerability (CVE-2016-0010) 0 × 01 SummaryIn this month's Microsoft Tuesday patch, Microsoft fixed 3 Office vulnerability MS16-004. This vulnerability is a heap overflow vulnerability

Android kernel/sys. c Privilege Escalation Vulnerability (CVE-2015-6640)Android kernel/sys. c Privilege Escalation Vulnerability (CVE-2015-6640) Release date:Updated on:Affected Systems: Android Android 6.0 ( Description: CVE (CAN) ID: CVE-2015

FFmpeg ff_dwt_decode Function Denial of Service Vulnerability (CVE-2015-8662)FFmpeg ff_dwt_decode Function Denial of Service Vulnerability (CVE-2015-8662) Release date:Updated on:Affected Systems: FFmpeg Description: CVE (CAN) ID: CVE-2015-866

58. A system fell from Audit Account to Regional Manager account (numerous information leaks) Zhuang Zai I dasmaI am here in the world of worldly fireworks, and I love the floating city of time reflection. Different from this: WooYun: A system

Sina Weibo's CSRF point will be followed by my link Recently, I was looking for a CSRF issue on Sina Weibo. As a result, I did not review the issue on wooyun. Later, I found several platforms that were packaged and sent to them.Now we can see this!

ZOL Zhongguancun online APP Multiple SQL injection (including 949 tables) SQL Injection for APP security Target: ZOL Zhongguancun online APPCheck that SQL Injection exists in the following places: (the session may have expired. Please obtain it

Google financial was exposed to the reflection File Download (RFD) Vulnerability     David Sopas, a Portuguese network security expert, found a reflection File Download (RFD) vulnerability that affects Google finance. I found this vulnerability

A weak password \ SQL injection vulnerability in a website in Digital China Getshell A weak password \ SQL injection vulnerability in a website in Digital China Getshell Vulnerability exists URL: http://dckf.digitalchina.com first, I see that a

Introduction to privilege abuse attacks and defense 0x00 Introduction Permission abuse is generally classified as a logic issue. This refers to the fact that the server is too open or has insufficient permissions. As a result, attackers can directly

Some SQL injections at Century jiayuan involve millions of members. An SQL injection at Century jiayuan, involving millions of members Injection point: http://vip.jiayuan.com/broker/?tag=1 Database:  Database: crm  +--------------------------------

Weak Password of a station in COFCO + secondary injection Weak Password of a station in COFCO + secondary injection Http: // 182.151.206.253/    You can log on to ihome directly.WooYun: Packaging of several system vulnerabilities in COFCO

Due to lax control of the New Oriental account system, Intranet roaming/the boss mode can be enabled (the company has 717 server permissions and databases) What I learned most from wooyun is CAPTCHA human bypass! 1. Entry https://mail.xdf.cnUse the

Persistent XSS Analysis of Firefox expansion Center   FirefoxADD-ONS this siteCreateCollections. Collections is a collection of the same add-on tools. Everyone can create or share tools in the collection. Each collection has a separate URL link, so

A SQL injection vulnerability in gionee mobile phone (affects information of 1.5 million users) The previous one was tested and repaired.But let's try again.For different injections, the same 1.5 million user information...GET/application/input?

A Security System of China Unicom has a general SQL Injection Vulnerability (no DBA permission required) Rt China Unicom Primary and Secondary School Security SystemPost injection exists in the logon box.  POST / HTTP/1.1Host:

A large number of security and monitoring devices in Yushi, Zhejiang Province have general design defects (root permission) Multiple models are involved Involved in model ISC3500-EL, ISC2500-S and so on, the specific manufacturer should be more

One injection + one Getshell Rt 1. InjectionHttp://bbs.auto.ifeng.com/search at the presence of injection (discuz x3.1 search box how will there be injection... here a little wonderful input will jump to the http://bbs.auto.ifeng.com/search.php at

Unauthorized access to a partner APP system causes the server to fall into the database, involving million users I want to brush a wave of RANK -.- Unauthorized access to redis causes SSH Authentication-free logon.Root @ kali :~ /. Ssh # ssh 121.43.1

A grand game site injects 12 Databases Rt Many important databases such as bbs on the website wan.sdo.com do not go deep into GET/Read/GetReplyDetail? Parentid = 9181 & replynum = 2 & pageindex = 1 & pagesise = 5 HTTP/1.1User-Agent: Mozilla/5.0

Use activity vulnerabilities to brush up Youku Baiyin members without limit You can register an Alibaba Cloud account for a youku member activity without having to register directly. You can receive silver members without limitation. Youku account